Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
File: 9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa (raw, json)
Hash identifier: UP8Ijpk2/wdLiBpt4O6/iZUfxA+hhP6gSPxwcxnFcVM=
Subject key identifier: 78:1C:61:AD:0F:A0:42:EC:5E:81:00:BF:B4:B6:33:3F:0A:1A:C6:5C
Certificate issuer: /CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Certificate serial: 010D0C9F4328584817050EECE2374F3E69C0B3A0
Authority key identifier: 91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 401207
IP address blocks: 198.133.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:0e:ec:e2:37:4f:3e:69:c0:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=980198c6-ba03-4361-9247-f3755a255e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:96:57:0d:72:04:73:18:26:a2:6e:6d:dd:
89:ab:c9:61:de:bf:0d:ab:74:60:fd:a8:2f:ea:24:
a2:c1:c8:6e:71:67:d3:0a:d9:c7:25:4c:d0:49:58:
06:e0:d5:20:09:50:75:c9:36:e9:76:c1:1e:80:7a:
33:8b:44:2c:c0:52:2d:c6:0a:26:a7:c2:20:2a:ae:
33:ce:9e:29:bc:96:a8:eb:9c:d1:6e:91:4c:08:10:
29:9d:cd:05:01:e9:14:cd:30:96:56:22:02:05:07:
e4:e0:35:63:b7:18:9a:c5:9c:e6:43:15:d7:f1:cb:
f2:da:6f:80:16:91:43:24:73:3c:9b:21:cb:b4:f6:
ad:72:1e:39:e7:f7:9e:29:18:11:41:33:e6:ae:83:
b4:d7:bd:e0:65:00:7c:a5:39:97:47:89:2c:ba:c1:
f1:13:ae:5e:31:61:f2:8d:ff:44:73:3d:e0:5a:e2:
1a:7a:69:71:f0:13:b6:8f:6f:c4:86:93:71:71:87:
4d:ab:03:9a:83:67:a7:bb:c9:97:bc:cb:d3:62:9b:
dc:af:0f:b6:36:94:49:47:89:bf:d3:69:3f:07:a3:
38:4f:cc:b9:e3:39:65:33:38:81:8c:00:05:d8:0d:
dc:e2:49:74:89:8a:2d:24:66:2a:43:1f:b9:01:27:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:61:AD:0F:A0:42:EC:5E:81:00:BF:B4:B6:33:3F:0A:1A:C6:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl
X509v3 Authority Key Identifier:
keyid:91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:44:a4:41:74:c2:ee:5f:91:74:48:bb:a6:c3:86:13:0b:38:
a6:67:31:65:40:88:63:ca:b5:61:5f:73:2e:7e:cb:20:dd:e6:
7f:6e:b8:13:be:2e:84:9b:8a:b0:68:59:36:59:c1:63:1a:4c:
a9:3f:fb:5e:02:07:2e:f9:13:7c:bb:7c:2d:e6:68:7c:bb:60:
ff:2c:80:b3:bd:fb:f9:48:53:d5:ce:94:a6:bf:2e:0a:d1:b8:
bc:9e:71:12:d0:c2:d3:c1:8f:93:9a:36:63:0e:bf:2e:84:55:
42:e5:2d:4b:8f:0a:a7:30:8e:62:5e:9f:29:56:b4:50:6c:f5:
ae:fe:47:ce:1f:3a:a4:69:94:2a:e2:3d:b4:ac:a0:87:36:81:
10:06:c9:fa:56:44:7c:9f:d0:a3:90:63:4a:3e:a8:48:58:b7:
cd:6b:e8:18:24:ce:91:26:4a:78:d7:27:c4:d5:52:c6:12:33:
bd:2c:15:4e:9a:00:78:74:09:fb:f5:2a:1d:27:25:fe:36:99:
c1:4b:5a:d8:04:38:bc:ec:3c:87:4c:1a:a8:07:73:17:68:87:
24:26:5e:e9:ca:cd:2c:ce:76:6b:6e:0f:b0:07:2c:09:10:03:
28:2b:18:19:02:3f:e3:ad:ba:c8:69:83:7f:91:88:b3:7d:53:
8c:64:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:36:36 2025 by rpki-client